# US 7,467,212 B2 · Control of access control lists based on social networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,467,212 B2 - Document ID: US7467212B2 - Status: Granted - Kind: B2 - Application number: 09/750,533 - Filed: 2000-12-28 - Published: 2002-09-05 - Granted: 2008-12-16 - Earliest claimed: 2000-12-28 - Assignees: Intel Corporation - Inventors: Robert Adams; Jose P. Puthenkulam - Web page: https://patentgrep.com/patent/US7467212B2 ## CPC - H04L 63/101: {Access control lists [ACL]} - G06F 9/468: {Specific access rights for resources, e.g. using capability register} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of controlling a social network access control list (ACL) for a shared resource includes monitoring communications to and from a user. Social network data from the communications to and from the user is determined. An access level for the user is determined based on the social network data. The access control list is configured to provide the user the access level determined for accessing the shared resource. ## Claims ### Claim 1 A method of sharing resources on a social network, the method comprising: monitoring communications between a plurality of users and a user having a shared resource coupled to a computer system of the user, the shared resource to be shared amongst one or more of the plurality of users; determining social network data from the communications between each of the plurality of users and the user having the shared resource, wherein each of the plurality of users has an ongoing relationship with the user having the shared resource and the social network data is based on varying degrees of interactions between each of the plurality of users and the user having the shared resource, wherein the communication includes communicating via emails between each of the plurality of users having the shared resources, wherein the emails are identified and counted; determining an access level for each of the plurality of users based on the social network data including the identified and counted emails, wherein the access level is selected from a group consisting of a read-only access, a read/write access, an execute access, a create access, an owner access, a no access, an all access, and a control access; and configuring an access control list to provide each of the plurality of users the access level determined for accessing the shared resource. ### Claim 2 (depends on 1) The method according to claim 1, wherein the social network data includes one or more of identities of the plurality of users and the user having the shared resource, a frequency of interaction between all users for a time period, a chronology of the communications, a topic of the communications, and resources attached to the communications. ### Claim 3 (depends on 1) The method according to claim 1, wherein the access control list includes a user identification and the access level for the user. ### Claim 4 (depends on 1) The method according to claim 1, wherein the shared resource comprises one or more of a file, a directory, a user, an input/output device, a peripheral device, portable electronic devices, and a computer system. ### Claim 5 (depends on 1) The method according to claim 1, wherein the social network data includes monitoring communications for particular keyword(s), wherein the access level is granted based on the number of occurrences of the particular keyword(s). ### Claim 6 (depends on 5) The method according to claim 5, wherein different weights are assigned to different keywords, wherein certain keywords have higher weights than other keywords. ### Claim 7 (depends on 1) The method according to claim 1, further comprising continuously updating the access control list to add and remove entries or to change access levels as the users transition in and out of the social network or as communications between the users changes. ### Claim 8 (depends on 1) The method according to claim 1, wherein the communications comprise one or more of emails, instant messages, file transfers, commands sent from one computer system to another, and any other types of communications performed between the plurality of users and the user having the shared resource. ### Claim 9 (depends on 1) The method according to claim 1, wherein determining social network data comprises: identifying communications from the user having the shared resource to each of the plurality of users; identifying communications from each of the plurality of users to the user having the shared resource; and tallying each identified communication for each of the plurality of users. ### Claim 10 (depends on 1) The method according to claim 1, wherein determining an access level comprises: obtaining a total number of communications with the user having the shared resource for each of the plurality of users based on the social network data; comparing the total number of communications for each of the plurality of users to an access level table to obtain the access level, the access level table comprising a plurality of access levels based on the total number of communications; and assigning an access level to each of the plurality of users. ### Claim 11 A communications system comprising: a computer system having a processor coupled with a storage medium, the computer system to control user access to a shared resource via an access controller, the shared resource including a data processing device, and the access controller including a first module being executed on the computer system, the computer system further having a network monitor coupled with the access controller, the network monitor including a second module being executed on the computer system, the network monitor to monitor communications between a plurality of users and a user having the shared resource coupled to a computing device of the user, and determine social network data from the communications between each of the plurality of users and the user having the shared resource, wherein each of the plurality of users has a relationship with the user having the shared resource and the social network data is based on varying degrees of interactions between each of the plurality of users and the user having the shared resource, wherein the communication includes communicating via emails between each of the plurality of users having the shared resources, wherein the emails are identified and counted; and the network access controller to determine an access level for each of the plurality of users based on the social network data including the identified and counted emails, wherein the access level is selected from the group consisting of a read/write access, a write-only access, an execute access, a create access, an owner access, a no access, an all access, and a control access, and configure a access control list to provide each of the plurality of users the access level determined for accessing the shared resource. ### Claim 12 (depends on 11) The communications system according to claim 11, wherein the social network data includes one or more of identities of each of the plurality of users and the user having the shared resource, a frequency of interaction between all users for a time period, a chronology of the communications, a topic of the communications, and resources attached to the communications. ### Claim 13 (depends on 11) The communications system according to claim 11, wherein the access control list includes a user identification and the access level for the user. ### Claim 14 (depends on 11) The communications system according to claim 11, wherein the shared resource comprises one or more of a file, a directory, a user, an input/output device, a peripheral device, a portable electronic device, and a computer system. ### Claim 15 (depends on 11) The communications system according to claim 11, wherein the social network data includes monitoring communications for particular keyword(s), wherein the access level is granted based on the number of occurrences of the particular keyword(s). ### Claim 16 (depends on 15) The communications system according to claim 15, wherein different weights are assigned to different keywords, wherein certain keywords have higher weights than other keywords. ### Claim 17 (depends on 11) The communications system according to claim 11, wherein the access controller is further to continuously update the access control list to add and remove entries or to change access levels as users transition in and out of a social network or as communications between the users change. ### Claim 18 A computer-readable storage medium having instructions which, when executed, cause a machine to: monitor communications between a plurality of users and a user having a shared resource coupled to a computer system of the user, the shared resource to be shared amongst one or more of the plurality of users; determine social network data from the communications between each of the plurality of users and the user having the shared resource, wherein each of the plurality of users has an ongoing relationship with the user having the shared resource and the social network data is based on varying degrees of interactions between each of the plurality of users and the user having the shared resource, wherein the communication includes communicating via emails between each of the plurality of users having the shared resources, wherein the emails are identified and counted; determine an access level for each of the plurality of users based on the social network data including the identified and counted emails, wherein the access level is selected from a group consisting of a read-only access, a read/write access, an execute access, a create access, an owner access, a no access, an all access, and a control access; and configure an access control list to provide each of the plurality of users the access level determined for accessing the shared resource. ### Claim 19 (depends on 18) The computer-readable storage medium according to claim 18, wherein the social network data includes one or more of identities of the plurality of users and the user having the shared resource, a frequency of interaction between all users for a time period, a chronology of the communications, a topic of the communications, and resources attached to the communications. ### Claim 20 (depends on 18) The computer-readable storage medium according to claim 18, wherein the access control list includes a user identification and the access level for the user. ### Claim 21 (depends on 18) The computer-readable storage medium according to claim 18, wherein the shared resource comprises one or more of a file, a directory, a user, an input/output device, a peripheral device, portable electronic devices, and a computer system. ### Claim 22 (depends on 18) The computer-readable storage medium according to claim 18, wherein the social network data includes monitoring communications for particular keyword(s), wherein the access level is granted based on the number of occurrences of the particular keyword(s). ### Claim 23 (depends on 22) The computer-readable storage medium according to claim 22, wherein different weights are assigned to different keywords, wherein certain keywords have higher weights than other keywords. ### Claim 24 (depends on 18) The computer-readable storage medium according to claim 18, wherein the instructions when executed, further cause the machine to continuously update the access control list to add and remove entries or to change access levels as the users transition in and out of the social network or as communications between the users changes. ### Claim 25 (depends on 18) The computer-readable storage medium according to claim 18, wherein the communications comprise one or more of emails, instant messages, file transfers, commands sent from one computer system to another, and any other types of communications performed between the plurality of users and the user having the shared resource. ### Claim 26 (depends on 18) The computer-readable storage medium according to claim 18, wherein determining social network data comprises: identifying communications from the user having the shared resource to each of the plurality of users; identifying communications from each of the plurality of users to the user having the shared resource; and tallying each identified communication for each of the plurality of users. ### Claim 27 (depends on 18) The computer-readable storage medium according to claim 18, wherein determining an access level comprises: obtaining a total number of communications with the user having the shared resource for each of the plurality of users based on the social network data; comparing the total number of communications for each of the plurality of users to an access level table to obtain the access level, the access level table comprising a plurality of access levels based on the total number of communications; and assigning an access level to each of the plurality of users.